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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MO NTH (S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after t he mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)Ex3 Responsive to communication(s) filed on 08 April 2004 . 
2a)Q This action is FINAL. 2b)[SI This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) £3 Claim(s) 1-34 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [X] Claim(s) 1-34 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1. This Office action is responsive to the following communication: Original application filed on 8 
April 2004. 

2. Claims 1-34 are pending and present for examination. Claims 1, 16 and 26 are independent. 

Information Disclosure Statement 

3. The information disclosure statement (IDS) submitted on 8 April 2004 is in compliance with the 
provisions of 37 CFR 1.97. Accordingly, the information disclosure statement is being considered by the 
examiner. 

Claim Rejections - 35 USC§ 112 

4. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

5. Claims 5, 19 and 29 are rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant regards as the 
invention. 

6. As per dependent claims 5, 19 and 29, the claims recite that "the information sharing 
module may create." The aforementioned recitation is indefinite because it provides a system wherein 
the information sharing module may, or may not, create the transitory link. Therefore, such language is, 
per se, an optional recitation of the method of creating the transitory link should the condition of "the 
confidential information correspond [ing] to information contained in the user privilege file" be fulfilled. 

Claim Rejections - 35 USC§ 102 

7. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 
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A person shall be entitled to a patent unless - 

(b) the Invention was patented or described in a printed publication in this or a foreign country or in public use 
or on sale in this country, more than one year prior to the date of application for patent in the United States. 

8. Claims 1-10, 12-13, 15-23 and 25-34 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Joshi et al (USPGPUB No. 2002/0091798, hereinafter referred to as JOSHI), filed on 26 
February 2001, and published on 11 July 2002. 

9. As per independent claims 1, 16 and 26, JOSHI teaches: 

A system for sharing confidential semiconductor manufacturing information comprising: 
an access monitor module for authorizing user access to confidential information {See 

JOSHI, [0196], wherein this reads over "Access Server authentication module 540 then authenticates 
the user using the user ID and password"}; 

an information sharing module for creating a transitory link to the confidential 
information in response to a user being authorized to access the confidential 

information {See JOSHI, [0124], wherein this reads over "[authorization even handler 516 
performs steps in a method for determining whether a user of browser 12 or 14 is authorized to 
access a requested resource upon a successful authentication or receipt of a valid authentication 

cookie"}; and 

a transitory link maintenance module for maintaining the transitory link and removing 

the transitory link from the system {See JOSHI, [0148], wherein this reads over ,v [o]nce 
authenticated, a user can explicitly log out, causing authentication cookies cached (or otherwise 
stored) by the user's browser to be destroyed or become invalid"}. 

10. As per dependent claim 2, JOSHI teaches: 

The system of claim 1 wherein the access monitor module monitors user idle time and 
may grant access to the system upon verifying user authorization to access the 

System {See JOSHI, [0209], wherein this reads over w [i]f the time elapsed since the session start time 
exceeds a maximum session time, the cookie will become invalid. Idle start time is also stored, which 
identifies the time when the previous HTTP request for a protected resource was made in which cookie 
was passed. If the time elapsed since the idle start time exceeds a maximum idle time, the cookie will 
become invalid"}. 

11. As per dependent claims 3, 17 and 27, JOSHI teaches: 

The system of claim 2 wherein the access monitor module denies user access to the 
system if the user idle time exceeds an allowable time limit {See joshi, [0148], wherein 

this reads over "[authentication cookies can also be set by an administrator to be destroyed after a 
maximum idle time has elapsed between requests to resources protected in accordance with the present 
invention"}. 

12. As per dependent claims 4, 18 and 28, JOSHI teaches: 

The system of claim 1 wherein the information sharing module determines whether the 
confidential information is information the user is authorized to access and, in 
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response to the confidential information being information the user is authorized to 
access, the information sharing module creating the transitory link {See joshi, [Oisi], 

wherein this reads over "the method attempts to determine whether the user Is authorized to access the 
requested resource. If the user is authorized (step 790), the method proceeds to step 792 . . . [where] 
the successful authorization of the user is togged in step 792, authorization success actions are performed 
in step 794, and the user is granted access to the requested resource in step 795"}. 

13. As per dependent claims 5, 19 and 29, JOSHI teaches: 

The system of claim 1 further comprising: a user privilege file, whereby the information 
sharing module may create the transitory link when the confidential information 
corresponds to information contained in the user privilege file {See joshi, [oisi], wherein 

this reads over "the method attempts to determine whether the user is authorized to access the requested 
resource. If the user is authorized (step 790), the method proceeds to step 792 . . . [where] the 
successful authorization of the user is logged in step 792, authorization success actions are performed in 
step 794, and the user is granted access to the requested resource in step 795"; and [0153], wherein this 
reads over "if a successful mapping has occurred (step 838), then Access Server 34 retrieves the 
authentication rule (step 844) and audit rule (step 846) associated with the requested resource"}. 

14. As per dependent claims 6, 20 and 30, JOSHI teaches: 

The system of claim 1 wherein the access monitor module uses cookies to authorize 

access tO the Confidential information {See JOSHI, [0124], wherein this reads over 
"[authorization even handler 516 performs steps in a method for determining whether a user of browser 
12 or 14 is authorized to access a requested resource upon a successful authentication or receipt of a valid 
authentication cookie"}. 

15. As per dependent claim 7, 21 and 31, JOSHI teaches: 

The system of claim 1 further comprising: 

an information list and request link disconnected from the confidential information, 
whereby upon creation of the transitory link, the information list and request link 
is connected to the confidential information through the transitory link to allow 

for accessing Of the Confidential information {See JOSHI, [0151], wherein this reads over 
"the method attempts to determine whether the user is authorized to access the requested resource. 
If the user is authorized (step 790), the method proceeds to step 792 .. . [where] the successful 
authorization of the user is logged in step 792, authorization success actions are performed in step 
794, and the user is granted access to the requested resource in step 795"}. 

16. As per dependent claim 8, JOSHI teaches: 

The system of claim 1 wherein the transitory link maintenance module periodically 
monitors the system for the transitory link and a corresponding link idle time {See 

JOSHI, [0209], wherein this reads over u [i]f the time elapsed since the session start time exceeds a 
maximum session time, the cookie will become invalid. Idle start time is also stored, which identifies the 
time when the previous HTTP request for a protected resource was made in which cookie was passed. If 
the time elapsed since the idle start time exceeds a maximum idle time, the cookie will become invalid"}. 

17. As per dependent cla im 9, 22 and 32, JOSHI teaches: 

The system of claim 8 wherein the transitory link maintenance module removes the 
transitory link from the system if the corresponding link idle time exceeds an 

allowable time limit {See JOSHI, [0148], wherein this reads over "[authentication cookies can also 
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be set by an administrator to be destroyed after a maximum idle time has elapsed between requests to 
resources protected in accordance with the present invention"}. 

18. As per dependent claims 10, JOSHI teaches: 

The system of claim 1 wherein the transitory link maintenance module removes the 
transitory link when the system indicates that the confidential information is no 

longer authorized to be accessed {See JOSHI, [0151], wherein this reads over "[otherwise, the 
unsuccessful authorization is logged in step 796. After step 796, the method performs authorization failure 
actions (step 798) and Web Gate 28 denies the user access to the requested resource"}. 

19. As per dependent claim 12, JOSHI teaches: 

The system of claim 1 further comprising: a network coupled to the system {See joshi, 

[0011], wherein this reads over "an access system that provides data to resources available on a 
network"; and [0080], wherein this reads over "a resource is anything accessible to a user on a network. 
The network could be the Internet, a LAN, a WAN, or any other type of network"}. 

20. As per dependent claim 13, JOSHI teaches: 

The system of claim 1 further comprising: a database coupled to the system {See JOSHI, 
[0080], wherein this reads over "[a] resource can include a web page, software 
application, file, database"}. 

21. As per dependent claim 15, 25 and 34, JOSHI teaches: 

The system of claim 1 wherein the transitory link is a symbolic link {See joshi, [0226], 

wherein this reads over "the resource determines whether there are any header variables to consider. If 
there are no header variables, then in step 1834, the resource responds to the request. Responding to the 
request can include providing a web page, access to a software process or anything else appropriate for 
the particular resource. If, in step 1832, it is determined that there are header variables, then in step 1836 
the resource searches for a particular variable name. In order to use header variables, the resource must 
be preprogrammed to know what header variables to expect and how to use them."}. 

22. As per dependent claims 23 and 33, JOSHI teaches: 

The method of claim 12 wherein the removing is performed after the confidential 
information has been accessed through the transitory link {See joshi, [0148], wherein this 

reads over "[authentication cookies can also be set by an administrator to be destroyed after a maximum 
idle time has elapsed between requests to resources protected in accordance with the present invention"}. 



Claim Rejections - 35 USC § 103 

23. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
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person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

24. Claims 11, 14 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over JOSHI, 
in view of Official Notice. 

25. As per dependent claims 11 and 24, JOSHI, in combination with Official Notice, discloses a 
system wherein the system exists within a virtual integrated circuit fabrication system since it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to include an access 
authentication system to protect confidential integrated circuit fabrication information. 

26. As per dependent claim 14, JOSHI, in combination with Official Notice, discloses a system 
wherein the access monitor module, the information sharing module, and the transitory link maintenance 
module are all written in the common gateway interface (CGI) since it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to use CGI, a well-known programming 
method, for writing modules of the claimed system. 

Conclusion 

27. Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Paul Kim whose telephone number is (571) 272-2737. The examiner can normally be 
reached on M-F, 9am - 5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Christian Chase can be reached on (571) 272-4190. The fax phone number for the organization where 
this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Paul Kim 

Patent Examiner, Art Unit 2161 
TECH Center 2100 




SAM RIMELL 
PRIMARY EXAMINER 



